All Good Validation
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 1m30s
This commit is contained in:
@@ -36,15 +36,6 @@ describe('Enterprise Application Flow & API Validation', () => {
|
||||
expect(response.status).toBe(404);
|
||||
});
|
||||
|
||||
// OWASP ZAP (/api/search)
|
||||
/* it('Should reflect the search query in the HTML response (/api/search) - Vulnerable to XSS', async () => {
|
||||
const maliciousPayload = '<script>alert("ZAP")</script>';
|
||||
const response = await request(app).get(`/api/search?q=${maliciousPayload}`);
|
||||
|
||||
expect(response.status).toBe(200);
|
||||
// Verifica se o payload é refletido exatamente como entrou (confirmando a vulnerabilidade)
|
||||
expect(response.text).toContain(`Resultados para: ${maliciousPayload}`);
|
||||
});*/
|
||||
});
|
||||
|
||||
// ==========================================
|
||||
|
||||
Reference in New Issue
Block a user